Account discovery is a technique in the MITRE ATT&CK framework under the Discovery tactic. It involves adversaries attempting to identify user accounts on a system or network.
Credential access, lateral movement, and resource development are tactics — high-level objectives an attacker is trying to achieve.
Question 21
Which type of system is a user entity behavior analysis (UEBA) tool?
A User Entity Behavior Analysis (UEBA) tool performs active monitoring by continuously analyzing the behavior of users and entities to detect anomalies that may indicate insider threats, compromised accounts, or malicious activity. It uses machine learning and analytics to identify unusual patterns in real time.